diff --git a/php/containers.json b/php/containers.json
index f72fb3f2..b2e01af2 100644
--- a/php/containers.json
+++ b/php/containers.json
@@ -388,7 +388,8 @@
           "destination": "/var/run/docker.sock",
           "writeable": false
         }
-      ]
+      ],
+      "read_only": true
     },
     {
       "container_name": "nextcloud-aio-domaincheck",